Finally got my Omega2 to reliably work with Mikrotik wifi in WPA2PSK-AES mode!

Here's the trick: as discovered earlier by @Scott-Horsley the option mode 'sta' allows connecting to AP, but does not allow any useful transmission. I found out that if you switch to mode '9' (original setting) following a successful connection in mode 'sta', without reboot, it will work!

@Scott-Horsley I was suspecting that some default firewall kicks in when Omega's software sees an open, unencrypted wifi network. But that assumes you're running an open network too, but I'm reading this wasn't the case.

I wasn't able to reproduce your observations regarding encryption - for me, Omega never connects to a WPA2PSK/AES network.

@Scott-Horsley thanks! I wasn't able to reproduce your config - for me, the change from option mode '9' to 'sta' doesn't change a thing. I still get "wlan1: disconnected, unicast key exchange timeout" in router logs.

However, I made some observations that might help you move forward:

with option mode 'sta' and security profile on Mikrotik set to default (open - no password), my Onion2 connects to wifi (!)

I also observed only ICMP traffic passing through

it seems to be a local firewall issue, as Mikrotik sniffing shows no outbound attempts

you can disable Onion firewall by /etc/init.d/firewall stop, but it doesn't change a thing - the only traffic that the router receives is ICMP and ARP, but not TCP